[PM-40514] Add custom attribute to check Organization abilities, use for risk insights endpoints

[lastbestdev]

🎟️ Tracking

https://bitwarden.atlassian.net/browse/PM-40514

📔 Objective

Adds a reusable custom attribute for checking the presence of an Organization ability before allowing an API request to process and return a result.

The original ticket is for patching up access to v1 Access Intelligence endpoints (aka Risk Insights), 5 of which were not checking the newly added Organization ability for feature access. The new attribute is applied to all Access Intelligence endpoints to gate access.

📸 Screenshots

N/A

[github-actions]

Claude Code is reviewing this pull request...

If this comment does not update with results, check the Actions log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.31%. Comparing base (ac309aa) to head (6796de1).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8240      +/-   ##
==========================================
+ Coverage   63.29%   63.31%   +0.01%     
==========================================
  Files        2401     2402       +1     
  Lines      104043   104071      +28     
  Branches     9426     9430       +4     
==========================================
+ Hits        65857    65891      +34     
+ Misses      35930    35926       -4     
+ Partials     2256     2254       -2     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.